Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

cant remove winfix tried everything

lgreen81

Posted 13 September 2005 - 01:56 PM

lgreen81

Member

Member

16 posts

ive tried everything i can think of ive run adaware, spybot, spycatcher, nortons antivirus, and pretty much everything else anyone has suggested. heres my hijackthis file hopefully some can help me out cuz this is driving me nuts

Advertisements

lgreen81

Posted 13 September 2005 - 11:30 PM

lgreen81

Member

Topic Starter

Member

16 posts

k cuz im an idiot and cant read instructions i posted b4 i tried all the fixes u said to try now ive done that and still got winfix and winantivirus and so on popping up so heres my new hijackthis log file hopefully someone can help thx

After the files are extracted, please reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.

Once in safe mode open the VundoFix folder and doubleclick on KillVundo.bat

You will first be presented with a warning and a list of forums to seek help at.
it should look like this

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).Set the program up as follows:Click "Options..."Move the arrow down to "Custom CleanUp!"Put a check next to the following (Make sure nothing else is checked!):

Empty Recycle Bins

Delete Cookies

Delete Prefetch files

Cleanup! All Users

Click OKPress the CleanUp! button to start the program.

It may ask you to reboot at the end, click NO.

Please run this online virus scan:Panda Active Scan You need to use Internet Explorer for this scan.

Once you get to the Panda site, scroll down a bit and click on Scan your PC

A new window will appear; click on Check Now!

A new window will appear; fill in the boxes (Country, State, email addy)

Click on Scan Now! >If you have never used ActiveScan before, you will be prompted to install an ActiveX control (asinst.cab) : click on Install. Panda will install the component, and then install the latest signature files.

From "Select a device to scan...", choose "My Computer"

Allow the scan to run. It'll take a while.

When complete, click on "See Report", and then on "Save report"; save it to a convenient location.

I will need you to post that report in your next reply; simply open the text file, then copy/paste the content here.

Copy the results of the ActiveScan and paste them here along with a new HiJackThis log and the vundofix.txt file from the vundofix folder into this topic.

lgreen81

Posted 17 September 2005 - 11:51 PM

lgreen81

Member

Topic Starter

Member

16 posts

k i ran the vundo file in safe mode and when i enetered the 2nd filepath and hijack this came up all the icons dissapeared off the screen and the screen froze. so i hit my restart button and went back into safe mode and undo again and it says the 2nd filepath cant be found and when i run hijack this i cant find any of the files u said to put checks to on the list

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).Set the program up as follows:Click "Options..."Move the arrow down to "Custom CleanUp!"Put a check next to the following (Make sure nothing else is checked!):

Empty Recycle Bins

Delete Cookies

Delete Prefetch files

Cleanup! All Users

Click OKPress the CleanUp! button to start the program.

It may ask you to reboot at the end, click YES.

Please run this online virus scan:Panda Active Scan You need to use Internet Explorer for this scan.

Once you get to the Panda site, scroll down a bit and click on Scan your PC

A new window will appear; click on Check Now!

A new window will appear; fill in the boxes (Country, State, email addy)

Click on Scan Now! >If you have never used ActiveScan before, you will be prompted to install an ActiveX control (asinst.cab) : click on Install. Panda will install the component, and then install the latest signature files.

From "Select a device to scan...", choose "My Computer"

Allow the scan to run. It'll take a while.

When complete, click on "See Report", and then on "Save report"; save it to a convenient location.

I will need you to post that report in your next reply; simply open the text file, then copy/paste the content here.

Copy the results of the ActiveScan and paste them here along with a new HiJackThis log and the vundofix.txt file from the vundofix folder into this topic.

Advertisements

loophole

Posted 18 September 2005 - 12:43 AM

Download and install CleanUp! Here but do not run it yet.*NOTE* Cleanup deletes EVERYTHING out of temp/temporary folders and does not make backups

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).Set the program up as follows:Click "Options..."Move the arrow down to "Custom CleanUp!"Put a check next to the following (Make sure nothing else is checked!):Empty Recycle BinsDelete CookiesDelete Prefetch filesCleanup! All UsersClick OKPress the CleanUp! button to start the program.

It may ask you to reboot at the end, click YES.

Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.

Please run this online virus scan:Panda Active Scan You need to use Internet Explorer for this scan.

Once you get to the Panda site, scroll down a bit and click on Scan your PC

A new window will appear; click on Check Now!

A new window will appear; fill in the boxes (Country, State, email addy)

Click on Scan Now! >If you have never used ActiveScan before, you will be prompted to install an ActiveX control (asinst.cab) : click on Install. Panda will install the component, and then install the latest signature files.

From "Select a device to scan...", choose "My Computer"

Allow the scan to run. It'll take a while.

When complete, click on "See Report", and then on "Save report"; save it to a convenient location.

I will need you to post that report in your next reply; simply open the text file, then copy/paste the content here. Also post a new Hijack log

loophole

Posted 18 September 2005 - 03:45 PM

Please reboot into safe mode Safe mode(continually tap the F8 key while your system is starting, select Safe Mode from the menu).

Now run cleanup

Reboot

Please run this online virus scan:Panda Active Scan You need to use Internet Explorer for this scan.

Once you get to the Panda site, scroll down a bit and click on Scan your PC

A new window will appear; click on Check Now!

A new window will appear; fill in the boxes (Country, State, email addy)

Click on Scan Now! >If you have never used ActiveScan before, you will be prompted to install an ActiveX control (asinst.cab) : click on Install. Panda will install the component, and then install the latest signature files.

From "Select a device to scan...", choose "My Computer"

Allow the scan to run. It'll take a while.

When complete, click on "See Report", and then on "Save report"; save it to a convenient location.

I will need you to post that report in your next reply; simply open the text file, then copy/paste the content here. Also post a new Hijack log

loophole

Posted 19 September 2005 - 02:49 PM

Now open pocketkillbox Select the option "Delete on reboot".Now highlight and 'copy' (Ctrl + C) the entire list of filepaths below:Click 'File' on the killbox menu at the top and choose 'Paste from clipboard'The entire list should now be in the "Full Path of File to Delete" field.To check, click on the dropdown-arrow next to that field.If you expand it, these lines should all be there